49.7.20.173 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: China

Internet Service Provider: China Telecom

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
attackspambots	The IP has triggered Cloudflare WAF. CF-Ray: 540f7019ae38e82d \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 00:26:18

Type

Details

Datetime

attackspambots

The IP has triggered Cloudflare WAF. CF-Ray: 540f7019ae38e82d | WAF_Rule_ID: asn | WAF_Kind: firewall | CF_Action: challenge | Country: CN | CF_IPClass: noRecord | Protocol: HTTP/1.1 | Method: GET | Host: img.skk.moe | User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 | CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).

2019-12-08 00:26:18

Comments on same subnet:

IP	Type	Details	Datetime
49.7.20.28	attack	Automatic report - Banned IP Access	2020-09-04 00:48:59
49.7.20.28	attack	Port Scan: TCP/443	2020-09-03 16:13:27
49.7.20.28	attack	Port Scan: TCP/443	2020-09-03 08:21:48
49.7.20.86	attackbotsspam	Dangerous	2020-08-18 05:09:48
49.7.20.28	attackbots	404 NOT FOUND	2020-08-14 12:45:26
49.7.20.28	attack	Malicious brute force vulnerability hacking attacks	2020-06-24 21:19:56
49.7.20.28	attackbots	IP: 49.7.20.28 Ports affected http protocol over TLS/SSL (443) World Wide Web HTTP (80) Abuse Confidence rating 35% Found in DNSBL('s) ASN Details AS23724 IDC China Telecommunications Corporation China (CN) CIDR 49.7.0.0/16 Log Date: 7/03/2020 5:59:58 AM UTC	2020-03-07 15:39:15
49.7.20.96	attackspambots	IP: 49.7.20.96 Ports affected World Wide Web HTTP (80) Found in DNSBL('s) ASN Details AS23724 IDC China Telecommunications Corporation China (CN) CIDR 49.7.0.0/16 Log Date: 28/02/2020 4:42:31 PM UTC	2020-02-29 01:36:31
49.7.20.161	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 54330e29e9a3e819 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:57:49
49.7.20.7	attackspam	The IP has triggered Cloudflare WAF. CF-Ray: 5430747a7e05eb25 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 04:06:55
49.7.20.22	attackbotsspam	The IP has triggered Cloudflare WAF. CF-Ray: 54340382ba31e7f9 \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: jschallenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-12 00:15:26
49.7.20.177	attack	The IP has triggered Cloudflare WAF. CF-Ray: 540fb9f34fb3e50e \| WAF_Rule_ID: asn \| WAF_Kind: firewall \| CF_Action: challenge \| Country: CN \| CF_IPClass: noRecord \| Protocol: HTTP/1.1 \| Method: GET \| Host: img.skk.moe \| User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.122 Safari/534.30 \| CF_DC: LAX. Report generated by Cloudflare-WAF-to-AbuseIPDB (https://github.com/SukkaW/Cloudflare-WAF-to-AbuseIPDB).	2019-12-08 03:22:51

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 49.7.20.173
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 59405
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;49.7.20.173.			IN	A

;; AUTHORITY SECTION:
.			380	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2019120700 1800 900 604800 86400

;; Query time: 950 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sun Dec 08 00:26:08 CST 2019
;; MSG SIZE  rcvd: 115

Host info

Host 173.20.7.49.in-addr.arpa. not found: 3(NXDOMAIN)

Nslookup info:

** server can't find 173.20.7.49.in-addr.arpa: NXDOMAIN

Related IP info:

Related comments:

IP	Type	Details	Datetime
210.223.193.10	attackspambots	Honeypot attack, port: 81, PTR: PTR record not found	2020-02-11 05:02:02
218.92.0.145	attack	2020-02-10T20:45:55.394657abusebot-2.cloudsearch.cf sshd[8393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145 user=root 2020-02-10T20:45:56.538532abusebot-2.cloudsearch.cf sshd[8393]: Failed password for root from 218.92.0.145 port 44931 ssh2 2020-02-10T20:46:00.189585abusebot-2.cloudsearch.cf sshd[8393]: Failed password for root from 218.92.0.145 port 44931 ssh2 2020-02-10T20:45:55.394657abusebot-2.cloudsearch.cf sshd[8393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.145 user=root 2020-02-10T20:45:56.538532abusebot-2.cloudsearch.cf sshd[8393]: Failed password for root from 218.92.0.145 port 44931 ssh2 2020-02-10T20:46:00.189585abusebot-2.cloudsearch.cf sshd[8393]: Failed password for root from 218.92.0.145 port 44931 ssh2 2020-02-10T20:45:55.394657abusebot-2.cloudsearch.cf sshd[8393]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218. ...	2020-02-11 04:54:06
168.232.13.38	attackspambots	Automatic report - Port Scan Attack	2020-02-11 04:49:24
198.108.66.92	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-11 05:10:25
158.69.64.9	attackspambots	Feb 10 17:00:50 markkoudstaal sshd[25936]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.64.9 Feb 10 17:00:53 markkoudstaal sshd[25936]: Failed password for invalid user jpv from 158.69.64.9 port 58540 ssh2 Feb 10 17:02:25 markkoudstaal sshd[26212]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=158.69.64.9	2020-02-11 04:58:13
129.204.46.170	attackbots	Feb 10 19:40:10 dedicated sshd[14662]: Invalid user ulq from 129.204.46.170 port 42258	2020-02-11 05:12:00
162.243.130.41	attackspambots	123/udp 512/tcp 110/tcp [2020-02-04/10]3pkt	2020-02-11 05:07:54
221.161.241.178	attackbots	Honeypot attack, port: 5555, PTR: PTR record not found	2020-02-11 05:05:06
112.85.193.169	attackspam	Feb 10 14:36:49 grey postfix/smtpd\[12424\]: NOQUEUE: reject: RCPT from unknown\[112.85.193.169\]: 554 5.7.1 Service unavailable\; Client host \[112.85.193.169\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[112.85.193.169\]\; from=\ to=\ proto=ESMTP helo=\ ...	2020-02-11 04:53:10
77.231.70.245	attackbotsspam	Automatic report - Port Scan Attack	2020-02-11 05:16:42
162.243.130.120	attack	trying to access non-authorized port	2020-02-11 05:06:31
113.240.237.10	attackspam	Brute force attempt	2020-02-11 04:55:39
78.73.77.228	attackspam	MultiHost/MultiPort Probe, Scan, Hack -	2020-02-11 04:56:24
106.12.93.25	attack	Feb 10 18:07:32 silence02 sshd[2640]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.93.25 Feb 10 18:07:35 silence02 sshd[2640]: Failed password for invalid user ha from 106.12.93.25 port 34246 ssh2 Feb 10 18:11:05 silence02 sshd[2870]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.93.25	2020-02-11 04:50:37
181.40.76.162	attackbotsspam	Feb 10 18:41:57 web8 sshd\[31209\]: Invalid user tqx from 181.40.76.162 Feb 10 18:41:57 web8 sshd\[31209\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.40.76.162 Feb 10 18:41:58 web8 sshd\[31209\]: Failed password for invalid user tqx from 181.40.76.162 port 49100 ssh2 Feb 10 18:45:58 web8 sshd\[778\]: Invalid user esq from 181.40.76.162 Feb 10 18:45:58 web8 sshd\[778\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=181.40.76.162	2020-02-11 04:51:10

Recently Reported IPs

123.139.82.42	123.138.72.202	122.96.28.232	116.252.2.213
116.252.2.21	116.249.238.72	113.58.225.45	112.230.47.187
112.193.170.31	112.80.139.3	112.66.100.49	111.224.249.12
111.224.235.60	110.80.155.111	106.11.159.49	104.238.160.247
60.186.106.57	60.13.6.205	52.141.47.95	45.128.152.90